Senior Cloud Security Engineer - R01573020

Brillio • New York, NY

3d

About The Position

Brillio is seeking a Senior Cloud Security Engineer to combine cloud security engineering, infrastructure protection, automation, and cross-functional collaboration. The role develops automated security tools, frameworks, and guardrails that help engineering teams adopt secure-by-default practices without slowing development. It also designs, implements, and maintains scalable security controls for cloud infrastructure, applications, and enterprise environments; partners with engineering and security teams to strengthen configurations and improve cloud security posture; and integrates security throughout the development lifecycle.

The engineer supports security incident investigations and responses, identifies root causes, and works with teams on preventive measures. The role also assesses third-party integrations, emerging AI tools, and technology solutions for data protection, integrity, and regulatory compliance; participates in threat modeling and architecture reviews; and educates development teams on security practices, vulnerability remediation, and risk mitigation.

Brillio is a digital technology services provider serving Fortune 1000 companies. The company describes its professionals as “Brillians” and states that it is an equal opportunity employer.

Requirements

• At least 5 years of experience in information security, cybersecurity, or a related field, including at least 2 years of hands-on cloud security experience.
• Strong understanding of cloud platforms and security capabilities, particularly AWS services including IAM, EC2, VPC, ECR, ECS, and EKS.
• Strong understanding of Microsoft Azure services and cloud security configurations.
• Foundational knowledge of Google Cloud Platform and its security capabilities.
• Hands-on experience with a Cloud-Native Application Protection Platform (CNAPP) or similar cloud security solution, such as Wiz, Orca Security, Lacework, or Upwind.
• Proficiency in at least one programming or scripting language, such as Python or Go, for security automation and tooling development.
• Understanding of fundamental security principles, including least privilege, defense-in-depth, security monitoring and threat detection, and cloud security posture management.
• Experience with containerization technologies such as Docker and orchestration platforms such as Kubernetes.
• Strong analytical, troubleshooting, and problem-solving skills, including the ability to assess complex security risks and recommend mitigations.
• Excellent communication and collaboration skills, including explaining technical security risks and remediation to technical and non-technical stakeholders.
• Ability to work closely with engineering teams to promote security awareness and continuous improvement in security practices.

Nice To Haves

• Experience with multi-cloud environments, including GCP and Oracle Cloud Infrastructure (OCI).
• Knowledge of multi-cloud networking, infrastructure security, and cloud architecture.
• Experience designing and implementing cloud-agnostic security solutions and frameworks.
• Exposure to emerging AI technologies and associated security risks.

Responsibilities

• Develop and implement automated security tools, frameworks, and guardrails that enable secure-by-default practices without impacting development velocity.
• Design, implement, and maintain scalable security controls for cloud infrastructure, applications, and enterprise environments.
• Partner with engineering and security teams to implement security enhancements, strengthen configurations, and improve cloud security posture.
• Collaborate with engineering, infrastructure, and technology stakeholders to integrate security throughout the development lifecycle.
• Support security incident investigation and response, identify root causes, and collaborate on preventive measures.
• Conduct security assessments of third-party integrations, emerging AI tools, and technology solutions for data protection, integrity, and regulatory compliance.
• Participate in threat modeling and architecture reviews to identify vulnerabilities and attack vectors early in development.
• Guide and educate development teams on security best practices, vulnerability remediation, and risk mitigation strategies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed